Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          mxUfQlxerw+JLuEj1HC7Z0wrIlVsRbynRMR1Y9QRatQ=
Subject key identifier:   34:6B:FC:94:2D:3F:04:B1:EA:55:C9:5B:50:E6:08:FD:28:CF:A3:17
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       01992331625354B0849FD7A501AD9D026145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          1147
Signing time:             Sun 07 Sep 2025 08:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 08:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 08:01:02 +0000
Files and hashes:         1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: DFFLtLMLCm4OvL+mVWPtTQH62HEGO3llEUmXMxMlAMA=)
                          2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:62:53:54:b0:84:9f:d7:a5:01:ad:9d:02:61:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Sep  7 08:01:02 2025 GMT
            Not After : Sep  8 08:01:02 2025 GMT
        Subject: CN=346bfc942d3f04b1ea55c95b50e608fd28cfa317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:ba:c8:01:21:79:c0:af:4a:e9:3e:72:02:
                    2a:18:9e:a8:c1:54:e1:18:09:c0:87:a8:91:e3:7b:
                    78:98:25:e8:c2:c4:53:28:a9:54:5e:95:2b:c2:0e:
                    f9:38:23:74:03:7e:d7:5a:5b:51:43:b1:c9:e3:c1:
                    3f:4e:72:92:7c:d0:56:07:74:d9:5e:59:ed:ef:dc:
                    4b:69:a9:3c:f7:fd:d7:50:dc:61:a1:37:39:9d:14:
                    bc:df:6a:d4:0d:db:5f:33:06:0e:1a:61:be:46:53:
                    0e:fb:97:c9:66:61:b9:5d:a5:26:31:c0:81:06:a8:
                    6c:4b:18:f0:d2:64:60:68:7c:fb:f7:ed:93:54:3a:
                    c8:45:ff:5b:6a:26:17:37:d1:52:85:32:d3:14:66:
                    7e:d5:37:8e:c0:cc:bb:58:95:e4:10:8d:25:85:7b:
                    5a:b5:1c:e1:35:9e:6a:11:30:41:42:ff:10:36:62:
                    bb:41:4e:cd:0f:91:61:d0:81:a6:65:85:6f:ba:10:
                    a4:37:76:d6:e9:77:36:12:59:d6:54:d8:29:63:b0:
                    69:c6:b2:46:64:66:94:07:ec:8c:e8:08:49:3f:80:
                    06:79:57:1c:18:e3:9d:32:d0:19:28:46:37:96:09:
                    94:49:25:0a:db:39:f2:5d:db:ae:a3:28:25:9b:bc:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:FC:94:2D:3F:04:B1:EA:55:C9:5B:50:E6:08:FD:28:CF:A3:17
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:ed:72:00:3e:37:ab:18:d3:7a:5b:5a:67:0b:d7:db:ba:
         08:45:46:3b:76:c3:ae:b0:7c:ad:61:f5:be:b8:e4:fa:0d:e8:
         fe:a0:5e:c7:4b:95:60:cd:f4:be:04:ac:a7:f2:3c:31:99:2b:
         10:01:3c:f9:f0:dc:37:ee:11:13:ef:11:ea:36:42:9c:91:2a:
         f8:07:6e:91:5c:fd:1a:18:1e:b8:ae:63:bb:00:34:1b:ef:2e:
         8e:98:dd:41:0f:67:06:3a:8c:14:56:c3:29:08:71:2f:d6:af:
         36:32:7d:60:42:cc:b1:b5:3d:c4:94:c5:b1:60:36:82:c6:d0:
         f0:8b:60:1f:ee:60:a7:36:92:f2:aa:d7:b2:89:ef:89:18:28:
         4a:f0:a2:cf:f1:3e:6c:14:5c:c3:04:b4:5e:84:b5:12:52:98:
         a7:8d:be:f1:f5:86:2a:12:96:cc:28:2a:a5:5b:88:2e:e1:61:
         b1:28:c4:fb:90:45:ef:a6:40:67:d3:ee:aa:e9:ba:b2:62:6a:
         3c:ee:cd:ab:7e:64:d1:2b:b3:37:ee:5b:9a:d5:d5:09:12:4a:
         0f:85:02:e0:d5:41:96:15:99:68:9a:a7:8a:41:96:ac:0a:1f:
         88:d1:2a:31:0e:b9:3d:68:f5:e9:d6:df:7d:6f:0b:95:14:ea:
         5c:6b:f2:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMWJTVLCEn9elAa2dAmFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmU5MDZmODJiM2Q1MTU1NjU5ZGFlNGQwODY3NjllZjEy
YTgyMTQwHhcNMjUwOTA3MDgwMTAyWhcNMjUwOTA4MDgwMTAyWjAzMTEwLwYDVQQD
EygzNDZiZmM5NDJkM2YwNGIxZWE1NWM5NWI1MGU2MDhmZDI4Y2ZhMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzie6yAEhecCvSuk+cgIqGJ6owVTh
GAnAh6iR43t4mCXowsRTKKlUXpUrwg75OCN0A37XWltRQ7HJ48E/TnKSfNBWB3TZ
Xlnt79xLaak89/3XUNxhoTc5nRS832rUDdtfMwYOGmG+RlMO+5fJZmG5XaUmMcCB
BqhsSxjw0mRgaHz79+2TVDrIRf9baiYXN9FShTLTFGZ+1TeOwMy7WJXkEI0lhXta
tRzhNZ5qETBBQv8QNmK7QU7ND5Fh0IGmZYVvuhCkN3bW6Xc2ElnWVNgpY7BpxrJG
ZGaUB+yM6AhJP4AGeVccGOOdMtAZKEY3lgmUSSUK2znyXduuoyglm7w0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRr/JQtPwSx6lXJW1DmCP0oz6MXMB8GA1UdIwQY
MBaAFEBukG+Cs9UVVlna5NCGdp7xKoIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgt
YTE4YTA1MTI3NzZjLzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgtYTE4YTA1MTI3NzZj
LzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA3tcgA+
N6sY03pbWmcL19u6CEVGO3bDrrB8rWH1vrjk+g3o/qBex0uVYM30vgSsp/I8MZkr
EAE8+fDcN+4RE+8R6jZCnJEq+AdukVz9GhgeuK5juwA0G+8ujpjdQQ9nBjqMFFbD
KQhxL9avNjJ9YELMsbU9xJTFsWA2gsbQ8ItgH+5gpzaS8qrXsonviRgoSvCiz/E+
bBRcwwS0XoS1ElKYp42+8fWGKhKWzCgqpVuILuFhsSjE+5BF76ZAZ9Puqum6smJq
PO7Nq35k0SuzN+5bmtXVCRJKD4UC4NVBlhWZaJqnikGWrAofiNEqMQ65PWj16dbf
fW8LlRTqXGvyrA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:15 2025 by rpki-client